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1. A methocA f or mutual authentication of components in a 
network using the challenge-response method, in which, 
in order Ao authenticate a terminal (M) , in particular a 
mobile statiion, with the network, the network (N) uses a 
request to Vequest from an authentication center (AUC) 
at least one\data pair comprising a first random number 
(Challenge l)\and a first response (Response 1), and 
passes the firtet random number (Challenge 1) to the 
terminal (M) which uses an internally stored key (Ki) 
likewise to calculate from this the first response 
(Response 1) and\ sends this to the network (N) , in which 
case, furthermore, the network (N) is authenticated with 
the terminal (M) in that the terminal sends a second 
random number (Challenge 2) to the network, to which the 
network responds wi\th a second response (Response 2) 
calculated in the AUC, 
wherein \ 

the first response (Response 1) sent from the terminal 
(M) to the network (N)\ is at the same time used as the 
second random number (Challenge 2), in which case the 
network has already requested the second response 
(Response 2) from the AUC in advance, together with the 
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first random number and the first response, as part of a 
triplet data set (Challenge 1/Response l/Response 2) . 

2. The method \as claimed in claim 1, wherein the network 
interprets the first response (Response 1) , which is 
sent back from the terminal (M) , as the second random 
number (Challenge 2) . 
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The met bod as claimed in claim 1 or 2 , wherein the first 
random numbers (Challenge 1) and the first response 
(Response 2) are transmitted from the network (N) to the 
terminal (M) ^Immediately successively in time. 

The method as claimed in claim 1 or 2, wherein the data 
pair (Challenge 1/Response 2) is transmitted from the 
network (N) to the terminal (M) simultaneously, in the 
form of a single data set. 

The method as claimed in one of claims 2, 3 or 4, 
wherein the network requests data sets from the 
authentication center (AUC) in the form of triplet data 
sets (Challenge ll/Response 1/Response 2) . 

The method as claimed in claim 5, wherein a plurality of 
triplet data sets iare supplied from the AUC as a 
stockpile, in ordepr to reduce the request frequency. 



The method/ as claimed in claim 4 or 5, wherein, in order 
to use the first response (Response 1) of the terminal 
(M) as the second rlandom number (Challenge 2) in order 
to authenticate the network with the terminal (M) , the 
shorter length of the first response (Response 1) is 
filled out to make up the greater length of the second 
random number (Challenge 2) . 
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The method as claimed in claim 7, wherein the filling- 
out process is parried out on a subscriber-specific 
basis, and wherein the complete length of the first 
response (Response 1) is shortened before transmission 
to the other station. 



The method as claimed in claim 8, wherein the first 

\ 

response (Response^ 1) is filled out with defined bits 
from the 
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secret key (KtL) to make up the length of the second 
random number I (Challenge 2). 

The method as claimed in claim 8, wherein the second 
random number ^Challenge) corresponds to the original 
first response uResponse 1) before it was shortened. 



The method as clla 
network is a GSM 

The method as cl 
network is a wire 



The method as cla 
individual , mutua 
wire-based networ 
computers which 
computer, and vi 



imed in one of claims 1-10, wherein the 
network. 

imed in one of claims 1-10, wherein the 
based network. 



imed in claim 12, wherein the 
Lly authenticating components in a 
c are different monitoring units of 
authenticate themselves with a central 
versa . 



The method as claimed in one of claims 1-13, wherein the 
AUC calculates the triplet data sets requested by the 
network and transnits these to the network off-line and 

tyime, on request by the network, but in 
any case before the data interchange between the network 
and the terminal , 
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